Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a016644d-fb76-3739-9c86-a7f57cbb5374.roa
File:                     a016644d-fb76-3739-9c86-a7f57cbb5374.roa (raw, json)
Hash identifier:          z5rNaoM3E65gOX5mpJr/6lT38B06z/z1hVIDyYzkfks=
Subject key identifier:   E9:4B:87:1A:BD:D9:C8:55:3A:C8:D8:BB:E2:97:3B:D7:0F:74:2A:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F747CCDA702B10AF9EFD17E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a016644d-fb76-3739-9c86-a7f57cbb5374.roa
Signing time:             Mon 03 Oct 2022 12:00:00 +0000
ROA not before:           Mon 03 Oct 2022 12:00:00 +0000
ROA not after:            Tue 08 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        204.126.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:7c:cd:a7:02:b1:0a:f9:ef:d1:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  3 12:00:00 2022 GMT
            Not After : Nov  8 05:00:00 2022 GMT
        Subject: CN=b1a5f8c6-3f03-4bc0-990d-f275fdf689ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:90:6f:0c:ea:34:55:39:b8:9b:0a:43:2d:
                    f9:6d:32:49:00:fb:5a:6b:64:73:b1:59:36:86:0f:
                    ee:8c:c2:01:97:4e:fa:65:b6:12:99:3e:3c:aa:61:
                    b8:65:3e:42:b7:45:c2:cf:cf:7d:8d:36:92:ad:1f:
                    20:42:ef:8f:1c:34:69:31:c4:6d:6e:f5:c0:54:76:
                    2c:45:1d:3a:5f:ea:3c:be:a4:62:53:01:60:f7:3b:
                    11:99:8f:0c:43:39:32:2b:0e:8b:27:ff:c5:18:0a:
                    49:26:78:6a:df:38:63:4d:2f:e2:8d:49:2e:60:50:
                    9d:6a:f2:59:cb:20:79:3c:23:c8:69:81:90:d8:fc:
                    bb:1a:cc:90:7e:8b:9b:10:d6:bf:09:00:14:15:03:
                    b4:ef:46:92:54:e6:6d:51:2f:00:6d:4a:41:bd:d8:
                    3b:0c:d6:83:b0:76:89:c4:e9:42:e6:34:f0:a9:07:
                    3c:54:6c:8f:49:cd:e1:f4:59:ea:fe:59:3f:95:c1:
                    a0:af:27:f7:9d:d0:77:20:a5:94:93:a2:6d:87:4c:
                    ad:48:08:0a:c2:61:16:59:3b:c8:f4:52:ea:7d:67:
                    9e:44:7f:21:d3:34:82:09:4b:01:1c:77:d0:df:c1:
                    42:fc:f4:89:63:3f:de:73:de:aa:71:39:88:6f:e2:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:87:1A:BD:D9:C8:55:3A:C8:D8:BB:E2:97:3B:D7:0F:74:2A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a016644d-fb76-3739-9c86-a7f57cbb5374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:61:81:b0:80:64:c0:70:c2:1a:db:bc:b0:0e:37:a0:21:
         0d:19:fa:89:f1:2c:b9:b2:0e:f2:e5:97:0c:e0:2f:20:6c:f8:
         19:b6:4b:a8:3d:a6:08:45:e2:1b:f7:29:47:a4:08:fe:37:bd:
         6e:8b:c4:65:3d:f2:7c:4b:eb:a2:8f:6c:db:ee:43:cc:c5:c1:
         33:bd:39:f6:e7:fa:ca:ef:26:ae:0e:d6:54:88:46:be:b0:5d:
         31:76:84:03:cd:ec:45:d8:1e:48:fe:c3:b7:46:85:58:db:51:
         98:04:4e:98:49:a4:0e:58:2f:fa:71:1f:63:81:6e:2b:96:3c:
         76:15:4b:11:07:b1:b9:05:db:07:58:55:49:c6:0a:da:f8:4e:
         45:4d:28:c0:1c:35:3e:6f:d0:f7:77:9a:8d:09:2b:de:54:47:
         6a:ac:e9:cd:aa:4b:5f:26:f2:b0:19:83:5c:e5:2d:0e:75:c9:
         eb:61:41:b6:5b:bf:fe:dd:a1:6a:b1:79:94:ec:a8:da:9e:4a:
         b6:f7:f0:1b:a2:87:2a:f8:f8:08:3b:bf:58:98:33:e4:6a:0b:
         42:db:c2:f0:a3:3d:30:44:55:aa:48:be:ef:b8:7d:0d:f7:17:
         f5:fd:a8:95:f2:b0:d2:62:65:60:e8:0e:55:2d:24:ea:12:cd:
         0c:f7:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:13 2025 by rpki-client